Especially if you don't have a risk management team.